Known vulnerabilities in Cisco Emergency Responder

Vendor: Cisco Systems, Inc
Software: Cisco Emergency Responder
Software CPE: cpe:2.3:a:cisco_systems:cisco_emergency_responder:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Emergency Responder Cisco Emergency Responder is affected by 13 known vulnerabilities: 1 critical, 3 high, 9 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109651 - Privilege Chaining
CVE-2025-20112		 CWE-268 Low
No
No
 - 22.05.2025 SB2025052222
#VU88134 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20352		 CWE-22 Low
No
No
 12.5 SU8 04.04.2024 SB2024040433
#VU88133 - Cross-Site Request Forgery (CSRF)
CVE-2024-20347		 CWE-352 Low
No
No
 12.5 SU8 04.04.2024 SB2024040433
#VU81671 - Improper input validation
CVE-2023-20259		 CWE-20 High
No
No
 012.005(001.27900.003), 014.000(001.14900.004) 06.10.2023 SB2023100607
#VU81494 - Use of Hard-coded Credentials
CVE-2023-20101		 CWE-798 Critical
No
No
 12.5.1SU5 04.10.2023 SB20231004108
#VU80178 - Permissions, Privileges, and Access Controls
CVE-2023-20266		 CWE-264 Low
No
No
 12.5.1SU5, 12.5.1SU6, 12.5.1SU7, 12.5.1SU8b, 14SU3a 31.08.2023 SB2023083111
#VU49596 - Information Exposure Through Log Files
CVE-2021-1226		 CWE-532 Low
No
No
 12.5.1 SU3 13.01.2021 SB2021011902
#VU24164 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16025		 CWE-79 Low
No
No
 12.5.1.21900.11, 14.0.0.98000.73 09.01.2020 SB2020010915
#VU9387 - Improper Authentication
CVE-2017-12337		 CWE-287 High
No
No
 - 21.11.2017 SB2017112115
SB2017112116
SB2017112117
and 5 more
#VU8156 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-12227		 CWE-89 Low
No
No
 - 06.09.2017 SB2017090714
#VU8114 - Improper input validation
CVE-2017-9804		 CWE-20 Low
No
No
 - 06.09.2017 SB2017082505
SB2017090801
#VU8112 - Improper input validation
CVE-2017-9793		 CWE-20 Low
No
No
 - 06.09.2017 SB2017090721
SB2017090801
#VU8111 - Deserialization of Untrusted Data
CVE-2017-9805		 CWE-502 High
Available
Exploited
 - 06.09.2017 SB2017090720
SB2017090801